KR101544110B1 - Supervisory control and data acquisition system - Google Patents

Abstract

An embodiment of the present invention relates to a supervisory remote control system. The supervisory remote control system includes: a first security management unit which receives data extracted from a smart meter through a wireless communications apparatus and/or a power line communication (PSL) module, encodes the received data by applying the data to a block symmetric key algorithm, and delivers the block symmetric key encoded data through a power communications network; and a package operation security management unit which is installed in a control center, receives the block symmetric key encoded data transmitted from the first security management unit, and recognizes and decodes the received block symmetric key encoded data individually.

Description

SUPERVISORY CONTROL AND DATA ACQUISITION SYSTEM [0002]

An embodiment of the present invention relates to a remote monitoring and control system.

In recent years, as social, economic and military activities based on the Internet or network have increased, there has been an increasing demand for the security and reliability of electronic transactions and information, and the protection of user privacy.

Particularly, in CCTV system for surveillance, disaster prevention, traffic, etc., some municipalities install and operate a VPN, but there is no separate guideline for video encryption, so it is impossible to falsify and tamper with captured image information State. Further, in the traffic signal control system, there is no encryption of information stored in the vehicle operation record analyzing apparatus. In the marine security system, although there is a cryptographic section between the ship position transmitter and the marine security system, most of them do not use the verification cryptographic module authentication (KCMVP). In addition, in the road traffic information system, passwords are used through password-based access authentication, and only the wireless section is operated as a cryptographic section. Key management is performed by using terminal authentication And the same key is assigned to each manufacturer, which makes it vulnerable to security. In addition, there are weak security policies for public facilities such as subways, power exchanges, airports, and facilities operated by public enterprises.

Registered Patent Publication No. 10-0978001 'Information Protection and Facility Management System and Method Applied with ARIA Algorithm' Registration No. 10-0933312 'Aria encryption method capable of data encryption and authentication and system for performing this' Registration No. 10-0737171 'Low memory type masking method corresponding to power analysis attack on aria' Japanese Patent Laid-Open Publication No. 10-2013-0104204 'Wireless communication security device and wireless communication security system including the same'

The embodiment of the present invention implements a verification-encrypted-module authentication (KCMVP) encryption module in a terminal that requires security for information such as a surveillance camera or a facility such as a public institution or a national institution, Thereby providing a remote monitoring and control system capable of configuring a more secure security tunnel.

In addition, the present invention provides a system in which the reliability of the remote monitoring control using the PLC is improved.

The remote monitoring and control system according to an embodiment of the present invention receives data extracted from a smart meter through a wireless communication device and / or a power line communication (PLC) communication module, and applies the received data to a block symmetric key algorithm A first security manager for encrypting and transmitting block symmetric key-encrypted data through a power communication network; And a generic operation security management unit installed in the control center for receiving the block symmetric key encrypted data transmitted from the first security management unit and for authenticating and decrypting the received block symmetric key encrypted data, The module comprises: a PLC modem connected to the smart meter; A PLC status monitoring unit monitoring in real time the communication status and the system status of the PLC modem using the PLC and sending an error occurrence message to the comprehensive operation security management unit through the Internet communication network in the event of an error of the PLC modem; And a system management unit for warm-restarting the PLC modem when the message is transmitted, and for resetting power of the PLC modem when the system of the PLC modem does not return to a normal state after the warm restart, Is provided on the Internet web page so that monitoring results of the communication status and the system status of the PLC modem are monitored.

The PLC communication module may further include a display unit for displaying a communication state of the PLC modem provided from the PLC status monitoring unit, a system status, and receiver information for receiving the abnormal occurrence message.

And a control unit connected to the surveillance camera, the data extracted from the surveillance camera is applied to a block symmetric key encryption algorithm, and the block symmetric key encrypted data is received through a wireless and / or wired network device, A second security management unit for transmitting data via an Internet communication network; Encrypting the data extracted from the field instruments and the sensors respectively by applying the block symmetric key algorithm to block symmetric key encrypted data, receiving the block symmetric key encrypted data through the wireless communication device, A third security management unit for transmitting data through a transmission line; A block symmetric key encryption algorithm, which is connected to a communication terminal installed in at least one of a national institution, a public institution, a military unit, an airport, a plant, a bridge and a tunnel, encrypts data extracted from the communication terminal, A fourth security management unit for transmitting data via a national key communication network and / or a wireless bridge; And a GPS (Global Positioning System) installed in the vehicle and the ship. The data extracted from the GPS is applied to a block symmetric key algorithm to encrypt and block symmetric key encrypted data is received through a wireless and / or wired network device And a fifth security management unit for transmitting the received data through the Internet communication network.

In addition, the comprehensive operating security management unit receives block symmetric key encrypted data transmitted from the first security management unit, the second security management unit, the third security management unit, the fourth security management unit, and the fifth security management unit, respectively An authentication server for authenticating the received block symmetric key encrypted data, and a block symmetric key decryption module for decrypting the received block symmetric key encrypted data.

The first security management unit may include a first block symmetric key encryption module attached to the monitoring camera, and the second security management unit may include a second block symmetric key encryption module attached to the field instrument and the sensor, respectively The third security management unit includes a third block symmetric key encryption module installed in a telephone pole, the fourth security management unit includes a fourth block symmetric key encryption module installed in the communication terminal, and the fifth security management unit And a fifth block symmetric key encryption module connected to the GPS, wherein the first block symmetric key encryption module transmits block symmetric key encrypted data to an internet communication network through a wireless access point (AP) The symmetric key cryptographic module transmits the block symmetric key encrypted data to a transmission line through a wideband code division multiple access (WCDMA) or radio frequency (RF) communication device And the third encryption module can transmit block symmetric key encrypted data through a hybrid fiber-coax (HFC) and / or a digital tape recording system (DTRS) network.

The remote surveillance control system according to the embodiment of the present invention includes a verification-encrypted-module authentication (KCMVP) encryption module installed in a terminal that requires security for information such as a surveillance camera or a facility such as a public institution or a national institution It is possible to construct a more secure tunnel by encrypting the data to the control center by interval encryption.

In addition, in using the PLC, it is possible not only to monitor and monitor the status of the PLC communication module in real time, but also to repair the simple error on the system itself, thereby improving the reliability of the remote monitoring control using the PLC.

1 is a general configuration diagram of a remote monitoring and control system according to an embodiment of the present invention.
2 is a block diagram illustrating a configuration of a PLC communication module according to an embodiment of the present invention.
Figure 3 is a screenshot of an Internet web page showing the monitoring of the PLC status via the PC.
4 is a screen shot of an Internet web page showing the monitoring of the PLC status through the mobile terminal.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The applicant will now describe in detail the construction of the embodiments with reference to the accompanying drawings.

Detailed descriptions of well-known functions and constructions that may be unnecessarily obscured by the gist of the present invention will be omitted.

1 is a general configuration diagram of a remote monitoring and control system according to an embodiment of the present invention. 2 is a block diagram illustrating a configuration of a PLC communication module according to an embodiment of the present invention.

1, a remote monitoring and control system 1000 according to an embodiment of the present invention includes a first security management unit 100, a second security management unit 200, a third security management unit 300, a fourth security management unit 400, a fifth security management unit 500, and a comprehensive operation security management unit 600.

The first security management unit 100 may transmit data extracted from a smart meter 10 installed in a house or a building to a wireless communication device and / or a PLC (power line communication) communication module 110 using Wi-Fi, Encrypts the received data by applying it to the block symmetric key algorithm, and transmits the block symmetric key encrypted data through the power communication network 12. [

For this, the third security management unit 300 may include a third block symmetric key encryption module installed on the telephone pole 11, for example, an academy research institute agency (ARIA) or a SEED encryption module. The third encryption module may transmit block symmetric key encrypted data through a hybrid fiber-coax (HFC) or a digital tape recording system (DTRS) network 12.

The PLC communication module 110 may include a PLC modem 111, a PLC status management unit 112, a system management unit 113, a power supply unit 114, and a display unit 115 as shown in FIG.

The PLC modem is connected to the smart meter and serves to input / output data between the smart meter 10 and the third block symmetric key encryption module.

The PLC monitoring unit 112 monitors the communication status and the system status of the PLC modem 111 using the PLC in real time, and when the PLC modem 111 malfunctions, And transmits an abnormality occurrence message. The message may be an SNS message and may be transmitted directly to the manager 6 of the generic operating security management unit 600. [

The system management unit 113 warmly restarts the PLC modem 111 when the message is transmitted and the system of the PLC modem 111 returns to a normal state after the warm restart And resets the power of the PLC modem 111 if the power is not supplied. At this time, the PLC state management unit 112 can inform the state that the comprehensive operation security management unit 600 can monitor in real time such as the original restart or reset of the power source.

On the other hand, the PLC status monitoring unit 112 is provided on the Internet web page so that the monitoring results of the communication status and the system status of the PLC modem 111 are monitored by the comprehensive operation security management unit 600 or the manager 6 can do.

FIG. 3 is a screenshot of an Internet web page showing the monitoring of PLC status via a PC. 4 is a screen shot of an Internet web page showing the monitoring of the PLC status through the mobile terminal. As shown in FIGS. 3 and 4, an administrator can monitor the portable terminal through an Internet-accessible portable terminal such as a PC installed in the comprehensive operation security management unit 600 or a smart phone of the user. For example, when the user accesses the Internet window of the PC or the portable terminal with the address "http://121.147.15.248:8002", the PLC status can be monitored as shown in FIG. 3 and FIG. 4 after a predetermined authentication process.

The monitoring contents shown in FIGS. 3 and 4 are largely categorized into codes, descriptions and states, and the codes are divided into date and time, F0030, F0031, F0032, F0033, F0034 and F0037, , F0030 is a code that is turned on when a heavy load is detected, F0031 is a code that turns on when a warning is turned on, F0032 is a code that turns on when a WDT designated time elapses, F0033 is a reserved I / / O is different, F0034 is a code that is turned on when the voltage of the power supply 114 is lower than a reference voltage, and F0037 is a code that is turned on when the PLC communication module 110 is forcibly turned on or off. . Here, when each code is turned on, a state corresponding to each code is processed abnormally, and an SNS message can be immediately transmitted to the manager. However, if each code is in the off state, the state corresponding to each code is treated as normal, no separate message is sent to the manager, and the PLC status can be monitored only through the web page.

The display unit 115 may display the communication status of the PLC modem, the system status, and the receiver information for receiving the abnormal occurrence message provided from the PLC status monitoring unit 112. The display unit 115 may include a touch panel.

The second security management unit 200 is connected to a surveillance camera 20 such as CCTV for crime prevention, disaster prevention and traffic surveillance. The second security management unit 200 applies data extracted from the surveillance camera 20 to a block symmetric key encryption algorithm, And may receive the block symmetric key encrypted data via the wireless and / or wired network devices 21, 22 and send the received data over the internet communication network 23. [

The second security management unit 200 may include a second block symmetric key encryption module attached to the surveillance camera 20, for example, an academy research institute agency (ARIA) or a SEED encryption module. The second block symmetric key encryption module may transmit the block symmetric key encrypted data to a wireless and / or wired network device such as a wireless access point (21) or video server (22) using Wi-Fi, To the Internet communication network 23 through the Internet.

The third security management unit 300 is connected to the field instruments 30a and 30b and the sensor 30c of the public facility and outputs data extracted from the field instruments 30a and 30b and the sensor 30c, Key algorithm, and receives the block-symmetric key-encrypted data through the wireless communication device 31 using a Wi-Fi or radio frequency (RF) communication network and transmits the received data to the transmission line 32 ). ≪ / RTI > The public facilities may include a traffic related instrument 30a for a railway and a road, a public lighting apparatus 30b such as a streetlight, and a sensor 30c such as a hydraulic system, a flow meter, a water level meter, and the like. Or an automated teller machine (ATM) of a financial institution.

The third security management unit 300 may include a third block symmetric key encryption module attached to each of the field instruments 30a and 30b and the sensor 30c and may be implemented as an academy research institute agency SEED encryption module. The block symmetric key encrypted data can be transmitted to the transmission line 32 through a wideband code division multiple access (WCDMA) or radio frequency (RF) communication device 31 via the third block symmetric key encryption module 300 have.

The fourth security management unit 400 is connected to a communication terminal installed in a country institution, a public institution, a military unit, a plant, an airport, a bridge or a tunnel, encrypts data extracted from the communication terminal by applying the block symmetric key algorithm , The block symmetric key encrypted data can be transmitted through the national key communication network and / or the wireless bridge 41.

The fourth security manager may include a fourth block symmetric key encryption module installed in the communication terminal, for example, an academy research institute agency (ARIA) or a SEED encryption module.

The fifth security management unit 500 is connected to a global positioning system (GPS) installed on the vehicle 50a and the ship 50b. The fifth security management unit 500 encrypts data extracted from the GPS by applying the algorithm to the block symmetric key algorithm, Receive the encrypted data through the wireless and / or wired network device, and transmit the received data through the Internet communication network 13. [

The fifth security management unit may include a fifth block symmetric key encryption module connected to the GPS, for example, an academy research institute agency (ARIA) or a SEED encryption module.

The comprehensive operation security management unit 600 is installed in the control center 60 and receives block symmetric key encrypted data transmitted from the first to fifth security management units 100, 200, 300, 400, Decrypts and manages the received block symmetric key-encrypted data, respectively, and performs remote control and monitoring of facilities or facilities equipped with the respective security servers. The control center 60 may be provided with a firewall 61 for preventing unauthorized access to the comprehensive operation security management unit 600 through an external communication network.

The comprehensive operation security management unit 600 includes an authentication server 601 for authenticating block symmetric key encrypted data transmitted from the first to fifth security management units 100, 200, 300, 400 and 500, And a symmetric key decryption module 602, respectively.

The comprehensive operation security management unit 600 can remotely monitor and control the first to fifth security management units 100, 200, 300, 400, and 500 by 1: N or 1: 1.

According to the embodiment of the present invention, a verification module (KCMVP) encryption module is installed in a terminal requiring security for information such as a surveillance camera or a facility such as a public institution or a governmental institution, The security tunnel can be configured more securely.

In addition, it is easy to maintain by applying ARIA (academy research institute agency) or SEED encryption module, it can be optimized for small facilities or terminals with small size, and hologram sticker can be sealed in the encryption module for physical security Do.

In addition, in using the PLC, it is possible not only to monitor and monitor the status of the PLC communication module in real time, but also to repair the simple error on the system itself, thereby improving the reliability of the remote monitoring control using the PLC.

It is to be understood that the present invention is not limited to the above embodiment and that various modifications and changes may be made without departing from the scope of the present invention as defined in the appended claims. It will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention.

1000: Remote monitoring control system
100: First security manager
110: PLC communication module
111: PLC modem
112: PLC status monitoring section
113:
114:
115:
200: second security management unit
300: the third security management unit
400: fourth security management unit
500: the fifth security management unit

Claims (5)

Receives the data extracted from the smart meter through a wireless communication device and a power line communication (PLC) communication module, encrypts the received data by applying the block symmetric key algorithm, and transmits the block symmetric key encrypted data through the power communication network A first security management unit;
And a control unit connected to the surveillance camera, encrypts data extracted from the surveillance camera by applying the block symmetric key encryption algorithm, receives the block symmetric key encrypted data through the wireless and / or wired network device, A second security management unit for transmitting the information through the Internet communication network;
Encrypting the data extracted from the field instruments and the sensors respectively by applying the block symmetric key algorithm to block symmetric key encrypted data, receiving the block symmetric key encrypted data through the wireless communication device, A third security management unit for transmitting data through a transmission line;
A block symmetric key encryption algorithm, which is connected to a communication terminal installed in at least one of a national institution, a public institution, a military unit, an airport, a plant, a bridge and a tunnel, encrypts data extracted from the communication terminal, A fourth security management unit for transmitting data via a national key communication network and / or a wireless bridge;
The data is extracted from the GPS and applied to a block symmetric key algorithm to encrypt and block symmetric key encrypted data is received through a wireless and / or wired network device A fifth security managing unit for transmitting the received data through the Internet communication network; And
Symmetric key encrypted data transmitted from the first security management unit, the second security management unit, the third security management unit, the fourth security management unit, and the fifth security management unit, An overall authentication security manager for authenticating and decrypting received block symmetric key encrypted data including an authentication server for authenticating the block symmetric key encrypted data and a block symmetric key decryption module for decrypting the encrypted block symmetric key encrypted data; , ≪ / RTI &
The PLC communication module monitors the communication status and the system status of the PLC modem connected to the smart meter and the PLC modem using the PLC in real time, and when the PLC modem malfunctions, the comprehensive operating security management unit A PLC status monitoring unit for sending an abnormality occurrence message to the PLC modem; and a controller for performing a warm restart of the PLC modem when the message is transmitted and resetting the power of the PLC modem when the system of the PLC modem is not returned to a normal status after the warm restart And a display unit for displaying a communication status of the PLC modem, a system status, and receiver information for receiving the error occurrence message provided from the PLC status monitoring unit, wherein the PLC status monitoring unit monitors the communication To monitor the status and status of the system, However,
Wherein the first security management unit includes a first block symmetric key encryption module attached to the monitoring camera and the second security management unit includes a second block symmetric key encryption module attached to the field instrument and the sensor, Wherein the third security management unit includes a third block symmetric key encryption module installed in a telephone pole and the fourth security management unit includes a fourth block symmetric key encryption module installed in the communication terminal, Wherein the first block symmetric key encryption module transmits block symmetric key encrypted data to an internet communication network via a wireless access point (AP), and the second block symmetric key encryption module The encryption module transmits block symmetric key encrypted data to a transmission line through a wideband code division multiple access (WCDMA) or radio frequency (RF) communication device Said the third block symmetric key encryption module for transmitting over a symmetric key, the encrypted data block HFC (hybrid fiber-coax) and / or (digital tape recording system) DTRS network,
Wherein the remote monitoring control system comprises: delete delete delete delete

Images